Log Install
Log Install
I
Consent REG_DWORD 0x1
COMMAND[1]=[C:\Windows\System32\netsh.exe advfirewall firewall add rule
name="Intel(R) System Usage Report - (QUEENCREEK Public UDP-In)" dir=in
action=block program="C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe"
service=ESRV_SVC_QUEENCREEK description="Deny inbound UDP traffic to Intel(R)
System Usage Report QUEENCREEK on public networks." enable=yes profile=public
localip=any remoteip=localsubnet localport=any remoteport=any protocol=UDP
interfacetype=any edge=no]
COMMAND[2]=[C:\Windows\System32\netsh.exe advfirewall firewall add rule
name="Intel(R) System Usage Report - (QUEENCREEK Public TCP-In)" dir=in
action=block program="C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe"
service=ESRV_SVC_QUEENCREEK description="Deny inbound TCP traffic to Intel(R)
System Usage Report QUEENCREEK on public networks." enable=yes profile=public
localip=any remoteip=localsubnet localport=any remoteport=any protocol=TCP
interfacetype=any edge=no]
COMMAND[3]=[C:\Windows\System32\netsh.exe advfirewall firewall add rule
name="Intel(R) System Usage Report - (QUEENCREEK Private SSDP-In)" dir=in
action=allow program="C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe"
service=ESRV_SVC_QUEENCREEK description="Allow inbound SSDP traffic to Intel(R)
System Usage Report QUEENCREEK on private networks." enable=yes profile=private
localip=any remoteip=localsubnet localport=1900 remoteport=any protocol=UDP
interfacetype=any edge=no]
COMMAND[4]=[C:\Windows\System32\netsh.exe advfirewall firewall add rule
name="Intel(R) System Usage Report - (QUEENCREEK Private TCP-In)" dir=in
action=allow program="C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe"
service=ESRV_SVC_QUEENCREEK description="Allow inbound TCP traffic to Intel(R)
System Usage Report QUEENCREEK on private networks." enable=yes profile=private
localip=any remoteip=localsubnet localport=any remoteport=any protocol=TCP
interfacetype=any edge=no]
COMMAND[5]=[C:\Windows\System32\reg.exe import
"C:\Windows\system32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\interm
ediate_data\install.reg"]
COMMAND[6]=[del /f /q
"C:\Windows\system32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\interm
ediate_data\install.reg"]
COMMAND[7]=["C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe" --install
--install_options_registry_key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESRV_SVC_QUEENCREEK\install]
COMMAND[8]=["C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe" --install
--run_as_user_process --install_dir "C:\Program Files\Intel\SUR\QUEENCREEK\x64"]
COMMAND[9]=[C:\Windows\System32\reg.exe delete
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESRV_SVC_QUEENCREEK /v install
/f]
COMMAND[10]=[C:\Windows\System32\schtasks.exe /create /xml "C:\Program
Files\Intel\SUR\QUEENCREEK\x64\task.xml" /tn USER_ESRV_SVC_QUEENCREEK]
COMMAND[11]=[C:\Windows\System32\reg.exe import
"C:\Windows\system32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\interm
ediate_data\task.reg"]
COMMAND[12]=[del /f /q
"C:\Windows\system32\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\interm
ediate_data\task.reg"]
COMMAND=[sc config ESRV_SVC_QUEENCREEK start= demand]